$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa File: a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa (raw, json) Hash identifier: UMeLNn0SDjTuhZyv6Qp/IOB5IYZbWFqvgci0ufraw+M= Subject key identifier: D2:65:93:6A:C4:F3:6A:E7:4A:F9:89:3B:A8:31:7B:83:77:C1:23:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0ED86ADE7DFBB79AF640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0e:d8:6a:de:7d:fb:b7:9a:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbfc32e7-bdc0-40e4-b7e2-456e8b0108f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:a7:fc:3d:33:2d:87:2f:75:8a:33:7a:09: 41:b4:61:42:78:34:c8:2c:21:88:0d:cc:11:a6:79: 9b:10:0e:b1:36:11:25:dc:03:e9:c2:61:54:41:16: 67:32:78:c7:73:5f:2e:cb:51:be:d3:3d:76:89:88: 93:11:22:53:10:ab:ef:d0:b0:d9:1e:63:b6:11:ca: 99:be:c9:b3:37:0d:b2:50:6e:9f:57:cc:c0:8f:1c: 89:d0:e0:21:2e:d2:66:c6:ee:44:f8:84:e5:9c:7d: ba:00:5a:3d:6a:6e:64:e7:3f:be:3f:4a:fb:1c:a6: 11:de:5d:8a:06:7b:b2:60:2f:99:33:ea:08:87:10: d9:92:ba:d0:26:64:18:a0:50:5f:ed:64:43:56:83: bc:db:b7:28:36:2d:8d:d7:ff:94:07:9a:53:43:c5: 79:61:00:fc:31:be:3c:16:35:bc:3e:e6:75:4a:f3: 5d:3e:28:e3:7c:54:da:31:9a:3f:be:c7:e8:c2:f8: d2:11:9c:fa:21:b4:60:42:4a:78:a3:bc:a3:93:9e: 8a:4e:25:0c:d1:38:3a:98:a1:39:17:df:32:50:83: d3:7e:17:15:df:8d:af:c8:b6:b4:92:a8:e6:10:0d: 0f:21:d8:ea:9b:4e:eb:fa:89:ef:8b:c4:9a:60:f3: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:93:6A:C4:F3:6A:E7:4A:F9:89:3B:A8:31:7B:83:77:C1:23:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a32b5a1e-fbcd-32b1-b42b-19d64122595e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ae:68:08:9f:c0:4d:30:32:e7:b1:0c:1e:b7:a3:fb:db:ad: a6:f5:e6:44:67:e8:51:2d:f3:54:b6:c1:38:e1:7e:83:21:a6: 8d:ee:6f:f0:3e:1c:ab:b7:4b:ea:e3:4d:f6:8c:40:ec:50:59: 30:e8:4a:bf:b6:60:5f:0a:de:2b:49:07:8b:0b:ea:16:99:21: d1:20:08:b8:58:b4:62:93:7e:50:3d:e8:1f:4a:8b:fd:c8:d9: 9e:71:cc:0c:32:33:38:ff:6b:02:e3:39:04:5c:39:c2:5e:8d: ec:5d:b1:4e:eb:d9:64:cd:a5:fd:13:a5:8e:fa:9d:08:62:a2: e2:53:5e:7e:0b:07:f9:68:87:e5:ff:a8:98:1a:cd:4f:25:4e: e3:c0:e3:37:9c:9b:c8:fc:48:82:39:87:5a:1a:4d:91:e7:b5: ff:f2:25:e7:34:3c:3b:77:4a:b0:df:a4:4a:73:5f:0c:f2:b9: 06:7b:56:fe:06:d5:29:ce:26:1d:a7:08:2d:ab:d7:a0:f7:5e: bd:1e:75:e3:d2:36:d2:0b:bc:81:af:5c:43:ad:00:92:72:20: bc:fe:ae:6e:8b:d7:51:f8:63:d7:4f:5c:e3:35:09:b1:29:da: 37:76:7e:f5:52:f5:f6:43:fd:87:f3:b0:08:9c:0d:04:a1:f8: f3:a4:60:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jew7Yat59+7ea9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJmYzMyZTctYmRjMC00MGU0LWI3ZTItNDU2ZThiMDEwOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGan/D0zLYcvdYozeglBtGFCeDTILCGIDcwR pnmbEA6xNhEl3APpwmFUQRZnMnjHc18uy1G+0z12iYiTESJTEKvv0LDZHmO2EcqZ vsmzNw2yUG6fV8zAjxyJ0OAhLtJmxu5E+ITlnH26AFo9am5k5z++P0r7HKYR3l2K BnuyYC+ZM+oIhxDZkrrQJmQYoFBf7WRDVoO827coNi2N1/+UB5pTQ8V5YQD8Mb48 FjW8PuZ1SvNdPijjfFTaMZo/vsfowvjSEZz6IbRgQkp4o7yjk56KTiUM0Tg6mKE5 F98yUIPTfhcV342vyLa0kqjmEA0PIdjqm07r+onvi8SaYPOU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJlk2rE82rnSvmJO6gxe4N3wSNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTMyYjVhMWUtZmJjZC0z MmIxLWI0MmItMTlkNjQxMjI1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK27MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACquaAifwE0wMuexDB63o/vbrab15kRn6FEt81S2wTjhfoMhpo3ub/A+ HKu3S+rjTfaMQOxQWTDoSr+2YF8K3itJB4sL6haZIdEgCLhYtGKTflA96B9Ki/3I 2Z5xzAwyMzj/awLjOQRcOcJejexdsU7r2WTNpf0TpY76nQhiouJTXn4LB/loh+X/ qJgazU8lTuPA4zecm8j8SII5h1oaTZHntf/yJec0PDt3SrDfpEpzXwzyuQZ7Vv4G 1SnOJh2nCC2r16D3Xr0edePSNtILvIGvXEOtAJJyILz+rm6L11H4Y9dPXOM1CbEp 2jd2fvVS9fZD/YfzsAicDQSh+POkYDY= -----END CERTIFICATE-----Generated at Tue Sep 29 13:25:26 2026 by rpki-client